Product Performance
| Firewall Throughput4 | Firewall (Traffic Mix) | IPS1 | NGFW1,2 | Threat Protection1,3 |
| 15 Gbps | 3 Gbps | 1.8 Gbps | 1.6 Gbps | 1 Gbps |
| 15 Gbps | 4 Gbps | 2.1 Gbps | 1.7 Gbps | 1.14 Gbps |
| 15 Gbps | 5 Gbps | 2.4 Gbps | 1.8 Gbps | 1.28 Gbps |
| 15 Gbps | 6 Gbps | 2.7 Gbps | 1.9 Gbps | 1.42 Gbps |
| 15 Gbps | 7 Gbps | 3 Gbps | 2.1 Gbps | 1.56 Gbps |
| 15 Gbps | 8 Gbps | 3.3 Gbps | 2.2 Gbps | 1.7 Gbps |
| 15 Gbps | 9 Gbps | 3.6 Gbps | 2.3 Gbps | 1.8 Gbps |
| 15 Gbps | 10 Gbps | 4 Gbps | 3.5 Gbps | 2 Gbps |
| Combination of product and performance licenses:
3G: RG-WALL 1600-Z5100-S chassis 4G: RG-WALL 1600-Z5100-S chassis + 1 RG-WALL 1600-Z5100-S-1G-LIC performance license 5G: RG-WALL 1600-Z5100-S chassis + 2 RG-WALL 1600-Z5100-S-1G-LIC performance licenses 6G: RG-WALL 1600-Z5100-S chassis + 3 RG-WALL 1600-Z5100-S-1G-LIC performance licenses 7G: RG-WALL 1600-Z5100-S chassis + 4 RG-WALL 1600-Z5100-S-1G-LIC performance licenses 8G: RG-WALL 1600-Z5100-S chassis + 5 RG-WALL 1600-Z5100-S-1G-LIC performance licenses 9G: RG-WALL 1600-Z5100-S chassis + 6 RG-WALL 1600-Z5100-S-1G-LIC performance licenses 10G: RG-WALL 1600-Z5100-S chassis + 7 RG-WALL 1600-Z5100-S-1G-LIC performance licenses |
||||
| System Performance and Capacity | RG-WALL 1600-Z5100-S |
| Firewall throughput of IPv4 packets (1518-byte UDP packets)4 | 15 Gbps |
| Firewall throughput (packets per second) | 2.3 Mpps |
| Concurrent sessions (TCP) | 1000000 |
| New sessions/second (TCP) | 134000 |
| Firewall policies | 4000 |
| SSL VPN throughput (1392-byte) | 3 Gbps |
| Concurrent SSL VPN users (recommended maximum, tunnel mode) | 1000 |
|
Application control throughput (HTTP 64K) 2
|
10 Gbps |
| IPsec VPN throughput (512-byte) | 4 Gbps |
| Gateway-to-Gateway IPsec VPN Tunnels | 1000 |
Note:
All performance values are the maximum values and may vary depending on system configuration.
- The performance values of IPS (mixed traffic), application control, NGFW, and threat protection are measured with logging enabled.
- NGFW performance is measured with firewall, IPS, and application control enabled.
- Threat protection performance is measured with firewall, IPS, application control, and malware protection enabled.
- Firewall throughput is the maximum forwarding performance (1518-byte UDP packets) of hardware.
Hardware Specifications
| Dimensions and Weight | RG-WALL 1600-Z5100-S |
| Product dimensions (W x D x H) | 440 mm x 300 mm x 43.6 mm (17.32 in. x 11.81 in. x 1.72 in.) |
| Shipping dimensions (W x D x H) | 545 mm x 450 mm x 130 mm (21.46 in. x 17.72 in. x 5.12 in.) |
| Product weight | 4.44 kg (9.79 lbs) |
| Shipping weight | 5.7 kg (12.57 lbs) |
| Form factor | 1 RU rack |
| Port Specifications | RG-WALL 1600-Z5100-S |
| Fixed service port | 8 x 10/100/1000BASE-T ports
2 x 1GE SFP ports 4 x 10GE SFP+ ports |
| Fixed management port | 1 x RJ45 MGMT port (reusing Ge0/0)
1 x RJ45 console port (RS-232) |
| USB port | 2 x USB 2.0 ports |
| Storage | RG-WALL 1600-Z5100-S |
| Hard disk | No hard disk for factory delivery. A 1 TB SATA hard drive can be added.
To ensure syslog security and system stability, please use Ruijie brand hard drives. Ruijie will not be responsible for any syslog loss or performance degradation resulting from the use of third-party hard drives.
|
| Power Supply and Consumption | RG-WALL 1600-Z5100-S |
| Power supply | 2 x pluggable power modules (one power module for factory delivery)
l Rated input voltage: 100–240 V; 50–60 Hz l Rated input current: 2 A (maximum) |
| Max. Power Consumption | < 60 W |
| Environment and Reliability | RG-WALL 1600-Z5100-S |
| Operating temperature | 0°C to 45°C (32°F to 113°F) |
| Storage temperature | –40°C to +70°C (–40°F to +158°F) |
| Operating humidity | 40% RH to 65% RH (non-condensing) |
| Storage humidity | 10% RH to 90% RH (non-condensing) |
| Noise level | 36 dB |
| Operating altitude | 0–5000 m (0–16404 ft.) |
| Compliance | EMC SZEM2404002506ATV
LVD SZES2404002242AT |
Software Specifications
| Network | RG-WALL 1600-Z-S Series |
| Physical interface | Configuring interfaces as LAN/WAN interfaces; three modes for WAN interfaces: PPPoE, DHCP, and static IP; configuring the routing, transparent, or bypass mode for interfaces |
| Sub-interface | Configuring sub-interfaces and VLAN IDs |
| Bridge interface | Configuring interfaces in transparent mode as bridge interfaces |
| Aggregate interface | Configuring aggregate interfaces |
| Routing | IPv4/IPv6 static and dynamic routing, routing policy, Policy-based Routing (PBR), ISP address library-based routing, application-based routing, and egress load balancing |
| DHCP server | DHCP server functions |
| DNS server | Configuring DNS addresses for devices |
| DDNS | Multiple DDNS service providers supported |
| Link detection | Link detection and link detection logs |
| VPN | SSL VPN and IPsec VPN |
| VRRP | VRRP functions |
| Object | RG-WALL 1600-Z-S Series |
| Address and address group | Configuring IPv4/IPv6 address objects in IP address/range format |
| Zone | Configuring security zones |
| Application and application group | Configuring application types in application/application group mode |
| Service and service group | Configuring service objects; common default port services supported |
| Time plan | Configuring time objects; one-off time plans and cyclic time plans supported |
| ISP address library | Default ISP address libraries: China Telecom (CHN), China Mobile (CHN), China Unicom (CHN), CERNET (CHN), and Beijing Teletron (CHN); customizing, importing, and exporting ISP address libraries |
| Virus protection template | Configuring content object templates; antivirus (AV) templates supported; configuring quick scan or deep scan; configuring templates based on protocols and directions; setting excluded viruses |
| Intrusion prevention template | Configuring content object templates; predefined Intrusion Prevention System (IPS) templates supported; customizing IPS templates; configuring rule filters based on objects, severity, protocols, and threat types; setting excluded rules |
| File filtering | Configuring content object templates; file filter templates (filtering by file type) supported |
| URL filtering | URL filtering |
| SSL proxy certificate | Adding, importing, deleting, viewing, and downloading SSL proxy certificates; configuring a global SSL proxy certificate |
| Server certificate | Importing, deleting, viewing, and downloading server certificates |
| Security rule base | Viewing default security rules in the IPS security library |
| Content identification | URL category and keyword configuration |
| User authentication | User management, user import, authentication server configuration, real-name user information synchronization, and authentication policy configuration |
| Policy | RG-WALL 1600-Z-S Series |
| Traffic learning | Traffic learning to record destination IP addresses and port numbers as well as abnormal traffic; exporting traffic learning logs |
| Network address translation (NAT) | NAT; configuring NAT policies; importing NAT policies in a batch; common NAT application-level gateway (ALG) services; server port mapping; viewing NAT address pool status |
| Security policy | Configuring security policies; customizing policies based on parameters including objects, contents, and zones; viewing the policy list; importing security policies in a batch |
| Policy simulation | Simulating policy execution in the simulation space to check whether uncertain security policies can achieve expected effects |
| Policy configuration wizard | Security policy configuration wizard for conducting port scan, performing configurations, testing configurations, and other steps to generate security policies |
| Policy optimization | Sorting out configured security policies and analyzing policies to identify redundant, expired, and conflicting policies |
| Policy lifecycle | Full lifecycle display of security policies, including detailed records of policy changes |
| Port scan | Port scan of configured IP ranges for all ports or selected ports; policy creation prompt for scan results |
| DoS/DDoS attack defense | Different DDoS attack defense policies in security defense |
| ARP attack defense | Preventing ARP attacks including ARP spoofing and ARP flooding in security defense |
| Local defense | Configuring local defense policies in security defense |
| Threat intelligence | Enabling or disabling threat intelligence; customizing threat intelligence; managing excluded threats |
| Blocklist and allowlist | Configuring global blocklists and allowlists |
| SSL proxy policy | Configuring SSL proxy policies; customizing policies based on parameters including objects, contents, and zones; viewing the policy list |
| SSL proxy template | Configuring SSL proxy templates; setting the template type to protecting client or server |
| Allowlist | Configuring domain name allowlists and application allowlists |
| Behavior analysis | Configuring analysis policies, templates, and allowlists |
| System | RG-WALL 1600-Z-S Series |
| Simple Network Management Protocol (SNMP) | Connecting to third-party platforms for management through SNMPv1/v2/v3 |
| Patch installation | Downloading and installing patches for upgrade |
| Cloud management platform | Enabling or disabling unified management on the cloud management platform; log upload to the cloud |
| One-click collection | Collecting fault information with one click |
| Device health | Device health diagnosis |
| Service diagnosis | Service continuity diagnosis |
| System upgrade | System upgrade and rollback |
| Database backup | System database backup and restoration |
| Factory settings restoration | Restoring factory settings on the web UI |
